On 19/01/11, Sam Varshavchik wrote: > > where I thought BOFHSPFFROM=all,mailfromok would let through all > > or most messages from mailing-lists in general but it seems that > > (from this list) if anyone sends a message to it from a domain > > that uses SPF then it bounces, ie; > > > > Jan 19 00:19:59 mail courieresmtpd: error, > > relay=::ffff:87.238.50.203, > > from=<[email protected]>: > > 517 SPF softfail [email protected]: > > Address does not pass the Sender Policy Framework > > > > The qt.nokia.com sub-domain does not have any SPF record at all > > but nokia.com does so it seems the From: is overriding the "From ". > > Of course I never get to see the headers of these 517 messages > > so it's a bit hard to exactly work out the difference between the > > ones that work and the bounces. > > Did you restart Courier after making changes in the bofh file. > With "all", you should not be bouncing mail, just recording the SPF > verification status in the headers.
Sorry, I actually showed the bofh from a different server as to the one with the 517 SPF log result (duh!). This is what I am using that got the log result above... opt BOFHSPFHELO=pass,none,neutral,unknown,error opt BOFHSPFMAILFROM=pass,none,neutral,unknown,error opt BOFHSPFFROM=pass,none,neutral,unknown,error,mailfromok opt BOFHSPFTRUSTME=1 I've now added softfail according to Alessandros' example (thanks for that and the explanation) so in the case of this list would I be better off removing mailfromok so it only works on the initial qt.nokia.com (which does not have a SPF record) and so therefor should pass? Also, the Nokia folks suggested I could whitelist their mail server so is that possible (SPF whitelist)? --markc ------------------------------------------------------------------------------ Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
